$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa File: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (raw, json) Hash identifier: 4eriJ+anZ8scJn8XHXKnKYPlWoQjR5KP9FszJSNrcus= Subject key identifier: 3C:32:43:4E:74:8B:4F:8E:4E:EB:83:06:5C:75:27:85:2A:78:67:D8 Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 026F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:57:14 +0000 ROA not before: Tue 03 Jun 2025 03:20:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38277 IP address blocks: 43.252.40.0/24 maxlen: 24 43.252.41.0/24 maxlen: 24 43.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jun 3 03:20:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a437aa-865d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:0b:1c:2c:ed:79:6c:de:9a:5f:df:fa:76: f1:3a:26:f9:84:c4:8a:63:6c:02:01:d3:a1:b8:a4: db:b1:81:f2:f1:79:96:10:42:82:5c:5d:d8:2e:65: 05:c0:21:59:57:ec:6c:70:43:a5:07:11:0f:8e:f3: e7:f0:c7:92:95:9f:b5:52:3b:67:76:96:7d:32:c6: 3e:a6:bc:e3:c9:53:13:16:46:13:c4:85:31:d8:f4: 87:e6:fb:91:aa:39:09:7f:9a:61:9c:10:c7:e2:a5: b1:52:fe:3d:13:e4:63:1e:38:f7:6a:81:08:4d:ef: 83:78:86:5c:2c:1e:f0:40:30:87:a5:0f:f4:c1:0b: 52:d6:20:22:6b:ec:e9:91:c6:d7:1d:55:7d:e7:16: 6e:98:f3:63:f5:55:e0:a8:58:36:74:a8:12:53:50: 45:b7:69:cf:a3:b2:a4:18:12:df:90:ae:ec:04:6b: b9:01:a2:ba:66:01:44:46:18:08:8d:33:5a:71:d8: 00:6c:2a:3e:59:e6:f5:d1:6c:da:fc:2f:79:8b:e3: 13:91:7d:9b:02:fc:85:1b:53:f6:52:e8:6b:9c:03: e4:1d:65:62:71:69:e4:2d:b0:45:c9:20:91:3c:72: 5b:9d:17:16:ba:1f:dd:12:0f:2d:53:17:53:bb:cb: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:43:4E:74:8B:4F:8E:4E:EB:83:06:5C:75:27:85:2A:78:67:D8 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.40.0-43.252.42.255 Signature Algorithm: sha256WithRSAEncryption 5c:db:23:ab:6e:bb:9d:80:ac:3f:f9:28:c8:51:6b:1c:59:d1: 4c:b1:77:9c:ef:61:00:23:ae:43:a9:a3:29:ea:9f:a5:4c:19: 9b:f8:37:a3:bd:60:42:85:e7:4c:66:37:75:7e:1a:8f:1d:bc: 02:cd:3a:09:37:30:c6:d7:00:97:0a:28:9d:ab:ef:b7:07:53: 52:1b:62:13:80:45:71:68:51:c9:18:ef:16:ba:3a:e9:55:b2: 47:2e:a8:76:98:f9:c6:69:13:fa:f9:01:b5:0e:1a:d7:67:b3: 38:d4:2b:5b:bc:25:e9:5e:28:cd:08:bc:9f:06:5f:90:b6:29: e5:0e:32:ad:b4:1f:a5:a1:b6:29:bd:16:f7:04:8d:d6:d7:10: ea:2a:67:91:71:c4:95:93:c3:76:0b:fb:59:02:12:c4:af:ce: 3d:0d:eb:4a:0a:c9:23:7c:2c:9a:01:d1:4b:bb:0e:9a:63:1c: 44:1b:6f:0a:99:f5:57:44:a9:a1:5f:74:6b:f2:1c:ce:28:d7: d7:fc:57:34:d4:1e:aa:0d:1b:6f:d6:3f:84:40:c6:24:13:90: 50:fa:b3:1b:53:af:50:55:7d:2c:2b:1e:2c:b3:4b:dc:9a:db: 31:2c:96:43:73:86:69:78:8d:64:e5:59:a4:57:92:75:dd:13: c0:d9:8d:4f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwNjAzMDMyMDA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzdhYS04NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvsLHCzteWzeml/f+nbxOib5hMSKY2wCAdOhuKTbsYHy8XmWEEKCXF3YLmUF wCFZV+xscEOlBxEPjvPn8MeSlZ+1UjtndpZ9MsY+przjyVMTFkYTxIUx2PSH5vuR qjkJf5phnBDH4qWxUv49E+RjHjj3aoEITe+DeIZcLB7wQDCHpQ/0wQtS1iAia+zp kcbXHVV95xZumPNj9VXgqFg2dKgSU1BFt2nPo7KkGBLfkK7sBGu5AaK6ZgFERhgI jTNacdgAbCo+Web10Wza/C95i+MTkX2bAvyFG1P2UuhrnAPkHWVicWnkLbBFySCR PHJbnRcWuh/dEg8tUxdTu8vNcQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFDwyQ050 i0+OTuuDBlx1J4UqeGfYMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwMTcvMTA1QUM4RkM5MEMzMTFFREJBMURDQzIzQzRGOUFFMDIvMDhBMUMwQjhE QzUwMTFFRjlDMjEyQzVDQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAMr/CgDBAAr/CowDQYJKoZIhvcNAQELBQADggEBAFzbI6tuu52A rD/5KMhRaxxZ0Uyxd5zvYQAjrkOpoynqn6VMGZv4N6O9YEKF50xmN3V+Go8dvALN Ogk3MMbXAJcKKJ2r77cHU1IbYhOARXFoUckY7xa6OulVskcuqHaY+cZpE/r5AbUO GtdnszjUK1u8JeleKM0IvJ8GX5C2KeUOMq20H6Whtim9FvcEjdbXEOoqZ5FxxJWT w3YL+1kCEsSvzj0N60oKySN8LJoB0Uu7DppjHEQbbwqZ9VdEqaFfdGvyHM4o19f8 VzTUHqoNG2/WP4RAxiQTkFD6sxtTr1BVfSwrHiyzS9ya2zEslkNzhml4jWTlWaRX knXdE8DZjU8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:07 2026 by rpki-client